terms

Website terms

These terms govern your use of this website: what is published here, who owns it, and what reading it does and does not commit either of us to. They are not the terms on which you would use Token Observe itself. The software is licensed separately, under a commercial source-available licence, and what you may do with it is settled by that licence and by a signed Order Form rather than by anything published here. Where a signed agreement and this page could be read as saying different things, the signed agreement governs and this page is not evidence of anything.
draft — not yet reviewed by counsel

These terms are a draft. No solicitor has reviewed them, and they are not yet an instrument you can rely on.

The document they most often point at says the same thing about itself. The software licence is stamped as a template requiring legal review before it is relied upon, and counsel approval of the licence, the evaluation terms, the privacy and data-processing position and the support language is the first item on the product’s own mandatory commercial gate. That gate has not passed. Publishing these terms as though it had would be the one thing this site is written not to do.

They are published anyway, because a draft a solicitor can mark up is more useful than a placeholder and more honest than an empty page. Read them as the company’s stated position; clause 17 lists what is still open. If a legal or procurement review depends on this page, write to hello@tenhaw.com and say so, and you will be told which parts are settled and which are not.

Tenhaw LTD, registered in England and Wales, no. 12735685Last updated hello@tenhaw.com
On this page

1. What these terms cover, and the three documents they are not

These terms are an agreement between you and Tenhaw LTD about one thing: your use of this website. Using the site means you accept them. If you do not accept them, the remedy is not to use it.

They are not the software licence. Token Observe is licensed under a commercial source-available licence, which permits use, modification and self-hosting under licence, permits reading the whole governance domain before you buy, and permits security research and publication of the results with no gag clause and no pre-approval — and which forbids redistribution and forbids offering Token Observe as a competing hosted service. That licence, and not this page, governs the software.

They are not an Order Form. What you may deploy, how many agents may be simultaneously active, the subscription term, the fees and the permitted scope of use are stated on a signed Order Form and nowhere else, including nowhere on this site.

They are not a support agreement. Severities, response targets, what support covers and what it explicitly does not are set out in the support terms attached to a signed agreement. This site’s account of them is a description of that agreement, not the agreement.

Where any of those three says something different from this page, it governs and this page yields. That ordering is deliberate, and it is the answer to most of the questions this page would otherwise be asked.

2. Who you are contracting with

Tenhaw LTD, a company registered in England and Wales under company number 12735685, incorporated on 10 July 2020, based in London, England. The Companies House record is public and linked below. Telephone +44 7548 516643.

Tenhaw LTD publishes Token Observe. Token Observe is the product name and Tenhaw LTD is the legal entity, and the site does not blur them: it is Tenhaw LTD you would be contracting with, on an Order Form, under the licence.

General correspondence, including anything about these terms, goes to hello@tenhaw.com. Security correspondence, including a vulnerability found in this website, goes to security@tenhaw.com. No VAT registration number is asserted on this page; whether one belongs here is on the list at clause 17.

3. What you may do with what is published here

Read it, print it, and put it in a file. Several pages, the security page in particular, are written to be printed into a vendor assessment and the print styles exist for that purpose. Quote from it in an internal document, a questionnaire response or a piece of analysis, provided the quotation is accurate and attributed to Token Observe or Tenhaw LTD.

The content, design, text, diagrams and code of this website are owned by Tenhaw LTD or licensed to it, and are protected by copyright and database right. Nothing here transfers ownership of any of it. Republishing the site, or a substantial part of it, as your own is not covered by the paragraph above.

Tenhaw and Token Observe are our marks. Other names on this site — model providers, standards bodies, competing products — belong to their owners and appear because naming a thing accurately is the only honest way to compare against it. Their appearance implies no endorsement in either direction.

4. Nothing on this site is an offer capable of acceptance

Every page here is an invitation to treat rather than an offer. Reading a page, copying a command, following a link or writing to us forms no contract, and nothing published on this site can be accepted into one.

A contract for the software comes into existence when an Order Form is signed by both parties, and not before. That is also why no price is published: the licence a figure would be quoted under is itself a template pending review by counsel, and a number published ahead of that would be a number set for a website rather than agreed against a scope. Any figure discussed in correspondence is an indication until it appears on an Order Form.

One thing on this site does grant you something, and it is granted by the licence rather than by these terms: the thirty-day evaluation, which permits installing and operating Token Observe for internal evaluation, security review and proof-of-concept purposes at your own risk. Its scope, its exclusions — live production traffic and regulated personal data among them — and its complete absence of warranty, support and service level are stated in the licence, and the licence is where to read them.

5. Capability descriptions are descriptions, not commitments

This site describes what the software does in unusual detail: an eleven-step governed request path, action-level permissions that deny by default, inline redaction in both directions, hash-chained evidence, six model providers under one identical policy set. Those descriptions are written to be accurate about a version of a piece of software. They are not warranties, they are not service levels, they are not representations about what your deployment will do in your environment, and they do not become terms of any agreement by having been published.

Software changes between versions, and a description of behaviour describes the behaviour at the time it was written. The binding statement of what you are entitled to is the signed Order Form and the licence. Where a capability matters enough to depend on, name it there rather than citing this site for it.

Two figures carry their conditions with them, and the conditions are part of the figure rather than a footnote to it. The published performance baseline is a laboratory measurement — thirty seconds at concurrency sixteen against a mock upstream on one laptop — and is evidence about a code path rather than a throughput commitment. The claim that adoption is a single environment variable is the normal case for the OpenAI-compatible, Anthropic and Gemini dialects, and is a claim about those dialects rather than a promise about every software development kit and version. Quoting either without its condition misstates it.

The site also publishes what the product does not do, what is deliberately not claimed, and the residual risks with the named role that has to accept each one. Those pages are part of the description rather than a counterweight to it: a limit published beside a claim is as much a statement about the software as the claim is, and both are descriptions rather than commitments.

6. No warranty on the content of this site, and none of it is advice

The site is provided as it is. Real effort goes into its accuracy — in this organisation a documentation claim that overstates a security property and cannot be substantiated in the code is treated as a security defect rather than as a typo — and even so we do not warrant that everything published here is accurate, complete or current, and we do not undertake to keep it up to date.

Nothing on this site is legal, regulatory, compliance, security or professional advice, and reading it creates no advisory relationship. The compliance pages map the product against the EU AI Act, ISO 42001, the NIST AI Risk Management Framework and OWASP guidance, with a coverage level stated on every row. A mapping describes what a control does; it is not an opinion that you are compliant, and it does not discharge an obligation you owe to a regulator, a customer or a data subject. Token Observe is a compensating control that produces evidence. Take your own advice.

Answers produced by the on-page assistant are generated by a language model from the text of this site. They can be wrong, they are not statements by the company, and where an answer matters it should be checked against the page, the licence or the source it was drawn from.

8. Acceptable use of this website, and the line the licence does not cross

Do not attempt to gain unauthorised access to this site or to anything behind it, do not interfere with its availability, and do not use it in a way that breaks the law or infringes anyone’s rights. Do not hold yourself out as us. Do not submit confidential information, or anyone else’s personal data, to the on-page assistant.

The site’s endpoints are public and unauthenticated, and automated use that degrades the service for other readers is not acceptable use. Ordinary crawling is, and the site publishes a machine-readable corpus precisely so that automated readers do not have to scrape it.

One distinction matters here more than it usually would. The licence’s permission to inspect, test, fuzz and penetration-test applies to Token Observe as deployed on infrastructure you control, and it is a genuine permission with no gag clause attached. It is not permission to test this website. If you find a vulnerability in the site, it is welcome and the address is security@tenhaw.com; the same safe-harbour intent applies, and it is stated here rather than assumed.

9. Availability of this website

We commit to no level of availability for this website, and we may change, suspend or withdraw any part of it without notice. A page that existed when you cited it may not exist later, so anything you need to rely on should be saved rather than linked.

That is consistent with what is published elsewhere rather than an exception made for the marketing site: the product carries no availability service level either, for three published reasons that are described as structural rather than negotiable.

10. Liability

Nothing in these terms excludes or limits our liability for death or personal injury caused by negligence, for fraud or fraudulent misrepresentation, or for any other liability that cannot lawfully be excluded or limited. Nothing in them affects the statutory rights of a consumer.

Subject to that, and to the fullest extent the law permits: this website and everything on it is provided without warranty of any kind, express or implied; we exclude liability for any loss or damage arising from reliance on anything published here; and we exclude liability for indirect or consequential loss, loss of profit, loss of business, loss of anticipated savings, loss of goodwill, and loss or corruption of data, however arising.

This website is free and informational, and the exclusions above are the ones an informational website carries. They say nothing about liability under the licence or under a signed agreement, which carry their own caps set against fee levels and insurance cover and negotiated rather than posted. What monetary cap, if any, belongs on this clause is one of the items counsel is being asked to settle at clause 17.

11. Privacy and cookies

How this website handles personal data — one cookieless page counter, no cookies of any kind, nothing stored on your device and therefore no consent banner, and what an email to a published address reaches — is set out in the privacy notice.

That notice also answers, separately and in its own clauses, why a self-hosted Token Observe deployment sends Tenhaw nothing and why supplying the software therefore makes us a processor of nothing. The separation is deliberate there for the same reason it is deliberate here.

12. Changes to these terms

We may change these terms. The version that applies to your use of the site is the one published at the time you use it, so the date at the top of this page is the version marker. That date is generated from the change history of the file rather than typed by hand, and it moves when the words move.

The first substantial change to these terms will be whatever counsel returns.

13. General

If any provision of these terms is held to be unenforceable, the remainder continues in force and the provision concerned is treated as modified to the minimum extent necessary, or removed if it cannot be. A failure or delay in enforcing a term is not a waiver of it.

These terms are the entire agreement between you and Tenhaw LTD about your use of this website. They do not vary, override or add to the licence, an Order Form or a support agreement, and nothing in them confers a benefit on any third party under the Contracts (Rights of Third Parties) Act 1999.

You may not transfer your rights under these terms. We may transfer ours in connection with a reorganisation or a sale of the business, provided that your rights under them are not reduced.

14. Governing law and jurisdiction

These terms, and any dispute or claim arising out of or in connection with them or their subject matter or formation, whether contractual or non-contractual, are governed by and construed in accordance with the law of England and Wales.

The courts of England and Wales have exclusive jurisdiction to settle any such dispute or claim. If you use this website as a consumer resident elsewhere in the United Kingdom or in the European Union, you keep the protection of the mandatory provisions of the law of your own country of residence and may bring proceedings in its courts where the law gives you that right.

15. The terms for using the software, in one place

Because this is the question the page is most often opened to answer: the software is not governed by these terms. It is governed by a commercial source-available licence — source-available rather than open source, which is the harder of the two words and the accurate one, because a product that calls itself open source and then forbids redistribution has told its most technical reader something untrue in the first sentence.

The licence permits use, modification and self-hosting under licence; reading the entire governance domain before buying, which is possible because the core package is pure functions with zero runtime dependencies; and security research with publication of the results, with no gag clause and no pre-approval. It forbids redistribution, and it forbids offering Token Observe as a competing hosted service. The published licence is a template pending review by counsel rather than legal advice, and the final terms are the ones in your signed agreement.

The commercial shape around it is published in the same register: what a subscription counts and what it never counts, what the thirty-day evaluation grants and what it excludes, the support severities and response targets, and the three published reasons there is no availability service level. Prices are not published, and the reason is stated rather than hidden behind a contact form.

16. How to reach us

Questions about these terms, about the licence, or about an Order Form: hello@tenhaw.com. Security correspondence, including a vulnerability in this website or in the software: security@tenhaw.com. Telephone +44 7548 516643. Both addresses reach a person rather than a queue, and both are the addresses published in the product’s own repository.

Tenhaw LTD, London, England. Registered in England and Wales, company number 12735685, incorporated 10 July 2020.

17. What this draft cannot state yet

Collected here so that a solicitor has the open items as a list rather than having to find them.

What monetary cap, if any, belongs on clause 10 for a free informational website. Whether a VAT registration number belongs on clause 2, and what it is. The registered office address as recorded at Companies House, which this page currently gives only as London. Whether the consumer carve-out at clause 14 is drawn correctly for the jurisdictions this site is actually read in. Whether the acceptable-use boundary at clause 8 is expressed strongly enough to be useful and narrowly enough to leave the licence’s research permissions untouched. And whether the licence, the evaluation terms and the support language survive review in the words this site quotes them in — that review is the first item on the product’s own mandatory commercial gate, and it has not passed.

Until those are closed, this page is a draft published in the open rather than a settled instrument, which is the position stated at the top of it.